SB20260912379 - Improper Check or Handling of Exceptional Conditions in Linux kernel broadcom bnxt driver

Description

This security bulletin contains information about 1 vulnerability.

1) Improper Check or Handling of Exceptional Conditions (CVE-ID: CVE-2026-80998)

CWE-ID: CWE-703 - Improper Check or Handling of Exceptional Conditions

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper handling of an early return in the bnxt software UDP generic segmentation offload transmission path when processing UDP generic segmentation offload packets. A local user can trigger an early return while a transmit doorbell write is pending to cause a denial of service.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/48d1c9665db6e3d4aeca62eb669377162ebc6fdf
• https://git.kernel.org/stable/c/4e15e89faac9f308baeb01f46c13a051814d2449